To get the cert=4939499ef9235465465465465ee165141c00f8ce0068fa4988252884b42136466362a07e part, one way is to configure the VPN without, try to connect, fail, then have a look in /var/log/syslog (on Ubuntu), there'll be something like this with the required ID.